Greg writes:

<snip>

>been mine. The above issue then came up. We were SAS-70, and will be
>striving for ISO-9000, and I am told that both audits have this as a
>requirement.

We just recently (this year) got our ISO-9000 certification and they 
never asked me a thing about separation of duties.  They were interested 
in seeing our backup procedures and tape vault.

Jim Phillips                            Manager of Information Systems
E-Mail: [log in to unmask]      Therm-O-Link, Inc.
Phone: (330) 527-2124                   P. O. Box 285
  Fax: (330) 527-2123                   Garrettsville, Ohio  44231